$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ce8219cc-c5d2-35af-84a5-aaa8c175fef6.roa File: ce8219cc-c5d2-35af-84a5-aaa8c175fef6.roa (raw, json) Hash identifier: JumKjGZp5FkexV8g4zjv/31Ry5PnHymhe95IAlcg6e8= Subject key identifier: 1D:1B:50:C5:8C:70:38:C1:8F:F7:B3:97:85:2F:B2:74:FA:7C:06:08 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F432858494CC9549AFC68782D0CECDD00 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ce8219cc-c5d2-35af-84a5-aaa8c175fef6.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 8069 IP address blocks: 52.122.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:54:9a:fc:68:78:2d:0c:ec:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=efda27bd-82d9-43d3-ad31-b194ae3e83f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:af:83:cb:f7:ef:9e:e7:f7:7b:c9:de:fd:70: c2:02:47:ee:98:aa:69:d2:c9:89:32:78:39:3a:10: b3:2c:b8:b2:83:fa:e1:bf:8b:e6:97:48:d5:3b:3d: c9:fc:9a:38:2d:b0:dd:01:db:bb:ab:bb:8e:74:3d: 8c:cd:5b:fa:ed:bf:0e:e4:3b:33:56:1f:f9:1a:70: bb:26:5f:fd:6d:bf:12:0d:73:e6:75:9d:25:16:40: 29:4f:98:89:83:02:85:75:34:60:b6:52:44:54:76: fb:9a:fa:f2:df:8e:4b:99:ac:b3:92:7b:59:b8:0e: bb:f7:b2:fc:d6:d6:e4:a7:0f:79:bd:81:6f:44:69: c6:31:cf:a0:15:4b:c8:ae:69:c5:27:68:99:af:4f: 57:12:b1:c8:80:ff:9e:bd:95:d0:80:56:3c:59:4a: 66:2a:8a:22:60:c5:09:1d:b0:b7:d2:91:b6:c5:90: 26:f0:dc:a6:68:3b:e9:e8:d9:ba:af:d3:f4:ed:81: e4:03:0c:f4:71:c1:bf:02:64:fd:c2:d6:2b:ef:4a: 5b:90:cb:5d:58:41:c6:37:6f:51:2b:6a:f5:21:7a: ab:d7:61:2c:e7:7f:b9:5e:d2:2f:48:54:3f:69:28: 76:f0:a6:98:72:3d:e6:24:05:b5:ae:8d:c3:5c:c7: 62:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1B:50:C5:8C:70:38:C1:8F:F7:B3:97:85:2F:B2:74:FA:7C:06:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/ce8219cc-c5d2-35af-84a5-aaa8c175fef6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 52.122.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:2d:22:43:91:59:aa:e2:2d:b3:e8:c6:0a:fe:6b:27:8d:af: 26:94:30:15:17:30:70:15:d0:81:18:11:55:2e:18:1f:c6:14: 45:e3:49:c4:76:43:d7:60:3b:45:e6:81:5a:c8:ba:06:b8:8e: 24:ab:d9:fb:76:78:ce:1d:e6:73:ba:9d:bf:d2:fb:9f:22:bc: 7b:c2:2d:a2:f8:f2:d3:15:f7:85:0c:ca:03:c8:43:cf:fa:37: e9:66:93:c6:0e:9d:9f:55:0e:8c:70:25:19:ea:bc:c6:0d:86: 22:3d:ea:e7:fa:79:a2:30:a6:96:f8:8f:8b:3d:12:2a:73:98: 19:75:3b:c4:9e:40:34:7f:ea:f5:d0:85:71:44:84:ab:32:fc: f6:9e:ac:01:16:be:5e:09:b5:81:4b:7f:fd:fc:9a:e8:f2:89: 5e:d5:6c:3f:70:50:c5:63:3f:39:0d:03:5f:48:37:a7:63:a4: 81:55:26:01:51:b6:36:45:9a:58:84:99:50:0f:0d:b1:b2:e6: ab:a2:a9:3a:8c:3e:e7:96:94:35:3c:fa:b4:d0:fa:96:6a:f7: 55:25:7f:64:40:55:cd:03:3f:ed:0b:b4:f0:45:cf:03:3c:56: 39:d9:dc:ae:46:eb:b1:ff:aa:5f:82:1b:ec:21:fa:a8:b7:78: 0f:26:86:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyVSa/Gh4LQzs3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk ZWZkYTI3YmQtODJkOS00M2QzLWFkMzEtYjE5NGFlM2U4M2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnK+Dy/fvnuf3e8ne/XDCAkfumKpp0smJMng5 OhCzLLiyg/rhv4vml0jVOz3J/Jo4LbDdAdu7q7uOdD2MzVv67b8O5DszVh/5GnC7 Jl/9bb8SDXPmdZ0lFkApT5iJgwKFdTRgtlJEVHb7mvry345LmayzkntZuA6797L8 1tbkpw95vYFvRGnGMc+gFUvIrmnFJ2iZr09XErHIgP+evZXQgFY8WUpmKooiYMUJ HbC30pG2xZAm8NymaDvp6Nm6r9P07YHkAwz0ccG/AmT9wtYr70pbkMtdWEHGN29R K2r1IXqr12Es53+5XtIvSFQ/aSh28KaYcj3mJAW1ro3DXMdiZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0bUMWMcDjBj/ezl4UvsnT6fAYIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvY2U4MjE5Y2MtYzVkMi0z NWFmLTg0YTUtYWFhOGMxNzVmZWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCNHrsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEtIkORWariLbPoxgr+ayeNryaUMBUXMHAV0IEYEVUuGB/GFEXjScR2 Q9dgO0XmgVrIuga4jiSr2ft2eM4d5nO6nb/S+58ivHvCLaL48tMV94UMygPIQ8/6 N+lmk8YOnZ9VDoxwJRnqvMYNhiI96uf6eaIwppb4j4s9EipzmBl1O8SeQDR/6vXQ hXFEhKsy/PaerAEWvl4JtYFLf/38mujyiV7VbD9wUMVjPzkNA19IN6djpIFVJgFR tjZFmliEmVAPDbGy5quiqTqMPueWlDU8+rTQ+pZq91Ulf2RAVc0DP+0LtPBFzwM8 VjnZ3K5G67H/ql+CG+wh+qi3eA8mhqo= -----END CERTIFICATE-----Generated at Thu Apr 17 09:03:13 2025 by rpki-client